www.rickvandeijk.nl

Issued by Symantec Basic DV SSL CA - G2

About this certificate

This digital certificate with serial number 52:32:13:94:e5:b4:30:2c:29:17:dc:70:ee:8d:be:6f was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.rickvandeijk.nl

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:32:13:94:e5:b4:30:2c:29:17:dc:70:ee:8d:be:6f
Serial Number (int): 109256707659930265837226371234956951151
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ca:ac:5d:e1:90:2f:f1:ef:8c:d4:9f:35:01:e1:01:3b:a0:ce:c1:77

Fingerprint (sha1): f9:c9:57:92:1a:7a:8b:9f:77:e6:a2:18:70:f0:cd:47:bb:3e:fb:71
Fingerprint (sha256): b7:99:fa:67:51:32:5f:11:86:05:f6:e9:93:3b:c1:39:fb:94:e3:35:7e:78:db:3e:db:3d:35:c8:73:7c:09:83

Issuing Certificate URL: http://hd.symcb.com/hd.crt

Revocation information

OCSP Server: http://hd.symcd.com

Check the revocation status for certificate www.rickvandeijk.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rickvandeijk.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rickvandeijk.nl
rickvandeijk.nl

Other certificates including the domain name rickvandeijk.nl

(limited to 100 certificates)
naxis.quilzer.net
minipractice.net
www.rickvandeijk.nl
www.aworanapp.com
joinmyteam.electricquest.com
www.raysoft.com.br
academy.nativemind.agency
gyaanx.in
www.rickvandeijk.nl
www.rickvandeijk.nl
teachers-darmanesti.ro
line.linetweet.com
rickvandeijk.nl
www.rickvandeijk.nl
www.rickvandeijk.nl
almafiesta.in
confiantservices.com
www.rickvandeijk.nl
www.rickvandeijk.nl
rickvandeijk.nl
www.armitecno.com
ar-tile.com
signandfill.whizpool.com
www.aworanapp.com
lojasmm.appshare.com.br
amanda.andreyneto.com.br
vizzn.ca
www.rickvandeijk.nl
portal.buysupplyni.app
www.pegasehealth.com
www.infiniteoutdoorsusa.com
www.rickvandeijk.nl
amanda.andreyneto.com.br
articles.libertytips1.com
survey.dayblizz.com
www.rickvandeijk.nl
www2.ctaffordablewaste.com
demo.helpline.chat
pokole.com
getstarted.kalimny.app
api.malte-thienel.de
www.pegasehealth.com

Certificate

The complete raw certificate details for www.rickvandeijk.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/lP1ZvkXOsz9l30wqim
Fj1gjtTs8p7ADBVfOrsPAjsCm3r5P+ZsMCz7X/rbLxWdqjkI9QIfFtJQQEV081j3
6J6e+XFZuldWe+u6543BW0ciIynJTGsj+RJg7ryLWijd0y2YQ88/lBBpqLE+weFY
mtYJJNpWFyf/5oJHIEWSPLZLGCCGiG7CDgtMNTqijSB+hVmEh9W3jpuSyP6UVdyW
jCx1y/kmPvwrXCmVUeB7z9Ncb4JZSeOd4cJbUnLwgdqQF7Zz68jgm+2MaWuw7AKO
lSppXtXLgRGEk12p/kUpYBUUt2qEq6IM63HUZpVPujGV+tGWaVznp6QR1EH6axhH
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109256707659930265837226371234956951151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Basic DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.rickvandeijk.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23729503285494232787868161930673284169069578183167431914674069144572561270117525412911630362588925143759697322673961177368165018559274785617895212286096661903160429624386028283498516143338092869872575128892406684880430002387549976736362937200752273082842297662849052005615860021201139249683028380633802927433679221830860245929281439318025375199776648829804818785857449053696429873517246214808866306446521282146169784723675648400011468434492195855057307795857089237841988763912328792978479773313009172878768329463587496258130053587832444030130237000717574889496893343658613373404598226065220360857798122849947405010871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rickvandeijk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rickvandeijk.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName caac5de1902ff1ef8cd49f3501e1013ba0cec177
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hd.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hd.symcb.com/hd.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d0e6969ae0000040300483046022100a14803d81870d44d4163e31af2a6db475650258816eeca6983ee71bac8d2aedb022100cb8f9a8e401096d0ad0d58d7084957b55d9b44563e6062c02b49449be8af86d6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d0e6969eb0000040300473045022100e8779c421b257909e66a7b293e809c4c19e00dbfd6e6a63682ea383529fc9fc8022047b6663eb6d95a9edd73a80226b5acea741322129db21c68011909e242509b13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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